Clop ransomware targets Gladinet CentreStack in data theft attacks

The notorious Clop ransomware crew is at it again, zeroing in on exposed Gladinet CentreStack servers to pull off data theft and extortion schemes, exploiting what might be an unpatched vulnerability or even a fresh zero-day flaw. CentreStack helps businesses share files securely over the web or apps without needing a VPN, making it a go-to for SMBs in over 49 countries—but that convenience is now a glaring weak spot if your setup’s internet-facing. With Clop scanning for these servers and leaving ransom notes, this campaign echoes their past hits on file-sharing tools like Accellion and MOVEit, which wreaked havoc on thousands of orgs, including big names like Harvard and The Washington Post. If you’re an MSP or small-business owner relying on CentreStack, don’t wait for the other shoe to drop—patch those systems ASAP, monitor your exposures, and remember that skipping updates is basically handing cybercriminals the keys. Meanwhile, the U.S. government’s dangling a $10 million reward for tips linking Clop to state-sponsored antics, so keep your eyes peeled and your defenses sharp to avoid becoming the next statistic.

Source: https://www.bleepingcomputer.com/news/security/clop-ransomware-targets-gladinet-centrestack-servers-for-extortion/